HP-UX Virtual Partitions Administrator's Guide (includes A.05.02)

vPars Flexible Administrative Capability (vPars A.03.03, A.03.04, vPars A.04.02, A.04.03, A.05.01)
Example HP-UX Shell Scenario (vparadmin)
Chapter 11
340
Example HP-UX Shell Scenario (vparadmin)
Below describes examples that include (from the HP-UX shell):
• a command successfully executed
• a command not executed due to the flexible administrative capability feature
• adding a virtual partition to the designated-admin virtual partition list
• deleting a virtual partition from the designated-admin virtual partition list
• listing the virtual partitions in the designated-admin virtual partition list
• changing the flexible administrative capability password
• determining whether you are in flexible administrative capability
For this section, let’s assume we have the virtual partitions winona1, winona2, and winona3.
A Command Successfully Executed
Because winona1 is in the designated-admin virtual partition list. We can execute a command from winona1
that alters winona2:
winona1# vparmodify -p winona2 -a cpu::1
Note that you will not see any flexible administrative capability messages when flexible administrative
capability is allowed; you will only see flexible administrative capability messages when access is denied.
A Command Not Executed Due to the Flexible Administrative Capability Feature
However, because winona2 is not in the designated-admin virtual partition list. We cannot successfully
execute a command from winona2 that alters another partition:
winona2# vparmodify -p winona1 -a cpu::1
vparmodify: Error: Only Designated-Admin virtual partitions can perform this operation on winona1.
winona2# vparmodify -p winona3 -a cpu::1
vparmodify: Error: Only Designated-Admin virtual partitions can perform this operation on winona3.
Note that if the target partition is the local virtual partition, then the partition is only altering itself and not
altering another partition, so this will be allowed.
winona2# vparmodify -p winona2 -a cpu::1
Adding a Virtual Partition to the Designated-admin Virtual Partition List
If we want the non-designated-admin virtual partition winona2 to be able to alter other virtual partitions, we
need to add it to the designated-admin virtual partition list. This can be done from any virtual partition, but
you will need to know the flexible administrative capability password.
winona2# vparadmin -a winona2
password:
Virtual partition winona2 is added to the Designated-Admin virtual partitions list.
Deleting a Virtual Partition to the Designated-admin Virtual Partition List
If later we want to remove winona2 from the designated-admin virtual partition list, we can do this from any
virtual partition: